autumnnote 1.13.0 → 1.15.0

package/package.json

@@ -1,16 +1,17 @@
 {
   "name": "autumnnote",
-  "version": "1.13.0",
+  "version": "1.15.0",
   "description": "WYSIWYG rich-text editor built with vanilla JavaScript — zero dependencies, no jQuery. Dark mode, @mention, markdown shortcuts, bubble toolbar. React and Vue 3 wrappers included.",
-  "main": "dist/autumnnote.umd.js",
+  "type": "module",
+  "main": "dist/autumnnote.cjs",
   "module": "dist/autumnnote.es.js",
   "types": "types/index.d.ts",
   "style": "dist/autumnnote.css",
   "exports": {
     ".": {
+      "types": "./types/index.d.ts",
       "import": "./dist/autumnnote.es.js",
-      "require": "./dist/autumnnote.umd.js",
-      "types": "./types/index.d.ts"
+      "require": "./dist/autumnnote.cjs"
     },
     "./dist/autumnnote.css": "./dist/autumnnote.css"
   },
@@ -21,18 +22,23 @@
   ],
   "scripts": {
     "dev": "vite",
-    "build": "vite build && vite build --config vite.umd.config.js",
+    "build": "vite build && vite build --config vite.umd.config.js && node scripts/create-cjs-alias.mjs",
     "build:demo": "vite build --config vite.demo.config.js",
     "preview": "vite preview",
     "prepublishOnly": "npm run build",
     "test": "vitest run",
+    "test:browser": "vitest run --config vitest.browser.config.js",
     "test:watch": "vitest",
-    "lint": "eslint src",
-    "typecheck": "tsc --noEmit",
+    "lint": "eslint src test",
+    "typecheck": "tsc --noEmit && pnpm --filter autumnnote-react typecheck && pnpm --filter autumnnote-vue typecheck",
     "build:cdn": "vite build --config vite.cdn.config.js",
     "analyze": "cross-env ANALYZE=1 vite build",
     "bench": "vitest bench",
-    "test:coverage": "vitest run --coverage"
+    "test:coverage": "vitest run --coverage",
+    "test:wrappers": "pnpm --filter autumnnote-react test && pnpm --filter autumnnote-vue test",
+    "build:wrappers": "pnpm --filter autumnnote-react build && pnpm --filter autumnnote-vue build",
+    "check:bundle": "node scripts/check-bundle-size.mjs",
+    "check": "pnpm lint && pnpm typecheck && pnpm test:coverage && pnpm build && pnpm test:wrappers && pnpm check:bundle && pnpm build:demo && pnpm build:wrappers"
   },
   "keywords": [
     "wysiwyg",
@@ -90,19 +96,22 @@
   "author": "Minh Pham",
   "license": "MIT",
   "devDependencies": {
-    "@vitest/browser": "^4.1.2",
-    "@vitest/coverage-v8": "^4.1.2",
+    "@vitest/browser": "^4.1.8",
+    "@vitest/browser-playwright": "^4.1.10",
+    "@vitest/coverage-v8": "^4.1.8",
     "cross-env": "^10.1.0",
-    "eslint": "^10.2.0",
+    "eslint": "10.3.0",
     "jsdom": "^25.0.1",
+    "playwright": "^1.61.1",
     "rollup-plugin-visualizer": "^7.0.1",
     "sass": "^1.99.0",
     "typescript": "^6.0.2",
-    "vite": "^8.0.3",
-    "vitest": "^4.1.2"
+    "vite": "^8.0.16",
+    "vitest": "^4.1.8"
   },
+  "packageManager": "pnpm@11.1.3",
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=20.19.0"
   },
   "browserslist": [
     "last 2 versions",

package/src/js/core/sanitise.js

@@ -6,7 +6,7 @@
  */
 
 /** Tags that are unconditionally removed from editor content. */
-const PROHIBITED_TAGS = ['script', 'style', 'iframe', 'object', 'embed', 'form', 'base', 'template', 'link', 'meta'];
+const PROHIBITED_TAGS = ['script', 'style', 'iframe', 'object', 'embed', 'form', 'base', 'template', 'link', 'meta', 'noscript', 'portal', 'frame', 'frameset', 'applet'];
 
 /** Tags whose element wrapper is stripped but content (child nodes) is preserved. */
 const UNWRAP_TAGS = new Set(['button']);
@@ -35,6 +35,11 @@ const TRUSTED_IFRAME_HOSTS = new Set([
   'player.vimeo.com',
 ]);
 
+const SAFE_LINK_PROTOCOLS = new Set(['http:', 'https:', 'mailto:', 'tel:']);
+const SAFE_MEDIA_PROTOCOLS = new Set(['http:', 'https:', 'blob:']);
+const SAFE_RASTER_DATA_RE = /^data:image\/(?:png|jpe?g|gif|webp|avif|bmp);base64,[a-z0-9+/=\s]+$/i;
+const URL_BASE = 'https://autumnnote.invalid/';
+
 /**
  * Produce a sanitized HTML string with dangerous elements and attributes removed.
  *
@@ -74,6 +79,15 @@ export function sanitiseHTML(html, { allowIframes = false } = {}) {
       continue;
     }
 
+    // Invalid embeds are removed rather than retained as empty iframes.
+    if (tag === 'iframe') {
+      const src = el.getAttribute('src');
+      if (!src || !isTrustedIframeSrc(src)) {
+        el.remove();
+        continue;
+      }
+    }
+
     // Strip dangerous attributes
     for (const attr of Array.from(el.attributes)) {
       // Remove all event handlers (onclick, onload, onerror, …)
@@ -95,14 +109,12 @@ export function sanitiseHTML(html, { allowIframes = false } = {}) {
       // Sanitise URL attributes
       if (URL_ATTRS.includes(attr.name)) {
         const val = attr.value.trim();
-        if (/^(javascript|vbscript):/i.test(val)) {
+        const isMediaSource = attr.name === 'src' &&
+          ['IMG', 'VIDEO', 'AUDIO', 'SOURCE'].includes(el.tagName);
+        if (!isSafeUrl(val, { media: isMediaSource, allowData: el.tagName === 'IMG' })) {
           el.removeAttribute(attr.name);
           continue;
         }
-        // Allow data: URIs only on img[src] (base64 image uploads); block elsewhere
-        if (/^data:/i.test(val) && !(attr.name === 'src' && el.tagName === 'IMG')) {
-          el.removeAttribute(attr.name);
-        }
       }
       // Strip iframe HTML-injection vectors; limit src to trusted hosts
       if (el.tagName === 'IFRAME') {
@@ -116,6 +128,10 @@ export function sanitiseHTML(html, { allowIframes = false } = {}) {
       }
     }
 
+    if (tag === 'a' && el.getAttribute('target') === '_blank') {
+      el.setAttribute('rel', 'noopener noreferrer');
+    }
+
     // Allow only input[type="checkbox"] inside ul.an-checklist li
     if (tag === 'input') {
       const inChecklist = el.closest('ul.an-checklist') !== null &&
@@ -184,12 +200,32 @@ function isTrustedIframeSrc(src) {
  * Optionally blocked: data: (safe to allow for img/src base64 embeds)
  *
  * @param {string} url
- * @param {{ allowData?: boolean }} [opts]
+ * @param {{ allowData?: boolean, media?: boolean }} [opts]
  * @returns {string|null} The original URL if safe, null if rejected.
  */
-export function sanitiseUrl(url, { allowData = false } = {}) {
+export function sanitiseUrl(url, { allowData = false, media = allowData } = {}) {
   const trimmed = (url || '').trim();
-  if (/^(javascript|vbscript):/i.test(trimmed)) return null;
-  if (!allowData && /^data:/i.test(trimmed)) return null;
-  return url;
+  if (!trimmed && url == null) return null;
+  return isSafeUrl(trimmed, { media, allowData }) ? url : null;
+}
+
+/**
+ * Validate a URL using the browser URL parser so ASCII whitespace/control
+ * characters cannot disguise a dangerous protocol (for example java\nscript:).
+ * @param {string} value
+ * @param {{media?: boolean, allowData?: boolean}} [options]
+ * @returns {boolean}
+ */
+function isSafeUrl(value, { media = false, allowData = false } = {}) {
+  const trimmed = (value || '').trim();
+  if (!trimmed) return true;
+  if (allowData && SAFE_RASTER_DATA_RE.test(trimmed)) return true;
+
+  try {
+    const parsed = new URL(trimmed, URL_BASE);
+    const protocols = media ? SAFE_MEDIA_PROTOCOLS : SAFE_LINK_PROTOCOLS;
+    return protocols.has(parsed.protocol);
+  } catch {
+    return false;
+  }
 }

package/src/js/index.js

@@ -144,7 +144,7 @@ const AutumnNote = {
   buttons,
 
   /** Library version */
-  version: '1.13.0',
+  version: '1.15.0',
 };
 
 // ---------------------------------------------------------------------------

package/src/js/module/Clipboard.js

@@ -371,7 +371,11 @@ export class Clipboard {
       execCommand('insertHTML', html);
       this.context.invoke('editor.afterCommand');
     };
-    reader.onerror = () => console.warn('[AutumnNote] Failed to read dropped markdown file', file.name);
+    reader.onerror = () => {
+      const message = `Failed to read dropped markdown file "${file.name}".`;
+      console.warn(`[AutumnNote] ${message}`);
+      this.context.triggerEvent('pasteError', { message });
+    };
     reader.readAsText(file);
   }
 

package/src/js/module/Editor.js

@@ -497,8 +497,7 @@ export class Editor {
 
   undo() {
     if (this._history) {
-      clearTimeout(this._snapshotTimer);
-      this._snapshotTimer = null;
+      this._flushPendingSnapshot();
       this._history.undo();
       this.context.invoke('toolbar.refresh');
       this.context.invoke('statusbar.update');
@@ -508,8 +507,7 @@ export class Editor {
 
   redo() {
     if (this._history) {
-      clearTimeout(this._snapshotTimer);
-      this._snapshotTimer = null;
+      this._flushPendingSnapshot();
       this._history.redo();
       this.context.invoke('toolbar.refresh');
       this.context.invoke('statusbar.update');
@@ -517,6 +515,14 @@ export class Editor {
     }
   }
 
+  /** Records a debounced change before an immediate undo/redo command. */
+  _flushPendingSnapshot() {
+    if (this._snapshotTimer === null) return;
+    clearTimeout(this._snapshotTimer);
+    this._snapshotTimer = null;
+    this._history?.recordUndo();
+  }
+
   canUndo() {
     return this._history ? this._history.canUndo() : false;
   }

package/src/js/module/ImageCropOverlay.js

@@ -444,6 +444,7 @@ export class ImageCropOverlay {
    * @param {(e: MouseEvent) => void} onMove
    */
   _attachDocDrag(onMove) {
+    this._dragDisposers?.();
     const onTouchMove = (e) => {
       e.preventDefault();
       const te3 = /** @type {TouchEvent} */ (e); onMove(/** @type {MouseEvent} */ (/** @type {unknown} */ ({ clientX: te3.touches[0].clientX, clientY: te3.touches[0].clientY })));
@@ -455,7 +456,9 @@ export class ImageCropOverlay {
       document.removeEventListener('touchend',  cleanup);
       document.body.style.userSelect = '';
       document.body.style.cursor     = '';
+      this._dragDisposers = null;
     };
+    this._dragDisposers = cleanup;
     document.body.style.userSelect = 'none';
     document.addEventListener('mousemove', onMove);
     document.addEventListener('mouseup',   cleanup, { once: true });
@@ -561,6 +564,8 @@ export class ImageCropOverlay {
    * @param {boolean} _committed - reserved for future use
    */
   _close(_committed) {
+    this._dragDisposers?.();
+    this._dragDisposers = null;
     this._disposers.forEach((d) => d());
     this._disposers = [];
 

package/src/js/module/TableTooltip.js

@@ -239,6 +239,7 @@ export class TableTooltip {
           !this._activeTable.contains(et) &&
           !this._el.contains(et) &&
           !this._sizePopover?.contains(et) &&
+          !this._shadePopover?.contains(et) &&
           !this._borderColorPopover?.contains(et)) {
           this._hide();
         }
@@ -1058,7 +1059,7 @@ export class TableTooltip {
 
     const d1 = on(applyBtn, 'click', () => {
       const val = Number.parseInt(this._sizeInputEl.value, 10);
-      if (val > 0 && typeof this._sizeApply === 'function') this._sizeApply(val);
+      if (val >= 0 && typeof this._sizeApply === 'function') this._sizeApply(val);
       this._hideSizePopover();
     });
     const d2 = on(cancelBtn, 'click', () => this._hideSizePopover());

package/src/js/module/VideoDialog.js

@@ -8,6 +8,7 @@
  */
 
 import { createElement, on } from '../core/dom.js';
+import { sanitiseUrl } from '../core/sanitise.js';
 import { BaseDialog } from './BaseDialog.js';
 
 const ICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polygon points="23 7 16 12 23 17 23 7"/><rect x="1" y="5" width="15" height="14" rx="2"/></svg>`;
@@ -115,12 +116,7 @@ export class VideoDialog extends BaseDialog {
    */
   _parseVideoUrl(url) {
     if (!url) return null;
-
-    // Validate — block javascript: and other dangerous protocols
-    try {
-      const parsed = new URL(url);
-      if (/^javascript:/i.test(parsed.protocol) || /^vbscript:/i.test(parsed.protocol)) return null;
-    } catch { return null; }
+    if (!sanitiseUrl(url, { media: true })) return null;
 
     // YouTube watch: https://www.youtube.com/watch?v=ID
     const ytWatch = /(?:youtube\.com\/watch\?(?:.*&)?v=|youtube\.com\/embed\/)([a-zA-Z0-9_-]{11})/.exec(url);
@@ -182,13 +178,7 @@ export class VideoDialog extends BaseDialog {
     }
 
     // Unknown URL — let the user try as a direct video
-    const safeSrc = (() => {
-      try {
-        const p = new URL(url);
-        if (/^javascript:/i.test(p.protocol) || /^vbscript:/i.test(p.protocol)) return null;
-        return url;
-      } catch { return null; }
-    })();
+    const safeSrc = sanitiseUrl(url, { media: true });
     if (!safeSrc) return null;
 
     const escapedSrc = safeSrc.replaceAll('"', '%22');

package/src/js/settings.js

@@ -50,6 +50,7 @@ import { defaultToolbar } from './module/Buttons.js';
  * @property {number}   [maxWords]             - Maximum word count (0 = unlimited). Shows warning in statusbar.
  * @property {boolean}  [tableHeaderRow]       - Insert a header row (<thead><th>) when creating tables
  * @property {Function} [onPaste]              - Callback fired on every paste: ({ text, html }) => void
+ * @property {Function} [onPasteError]         - Callback fired when pasted or dropped content cannot be processed
  * @property {Function} [onSelectionChange]    - Callback fired on cursor/selection change: (context) => void
  * @property {string[]} [colorSwatches]        - Custom brand colour swatches prepended to the colour-picker palette
  * @property {Function} [onDestroy]            - Callback fired when the editor is destroyed: (context) => void
@@ -143,6 +144,8 @@ export const defaultOptions = {
   colorSwatches: [],
   // Callback fired after a paste event: function({ text, html })
   onPaste: null,
+  // Callback fired for rejected/failed paste and drop payloads: function({ message, size?, maxBytes? })
+  onPasteError: null,
   // Callback fired just before the editor instance is destroyed
   onDestroy: null,
   // Callback fired when the character limit is reached: function(context)

package/types/core/dom.d.ts

@@ -0,0 +1,32 @@
+export const ELEMENT_NODE: 1;
+export const TEXT_NODE: 3;
+export function isElement(node: Node): boolean;
+export function isText(node: Node): boolean;
+export function isVoid(node: Node): boolean;
+export function isPara(node: Node): boolean;
+export function isLi(node: Node): boolean;
+export function isList(node: Node): boolean;
+export function isTable(node: Node): boolean;
+export function isInline(node: Node): boolean;
+export function isEditable(node: Node): boolean;
+export function isAnchor(node: Node): boolean;
+export function isImage(node: Node): boolean;
+export function closest(node: Node, predicate: (node: Node) => boolean, stopAt?: Node): Node | null;
+export function closestPara(node: Node, editable?: Node): Node | null;
+export function ancestors(node: Node, stopAt?: Node): Node[];
+export function children(node: Node): Node[];
+export function prevElement(node: Node): Element | null;
+export function nextElement(node: Node): Element | null;
+export function createElement(tag: string, attrs?: Record<string, string>, childNodes?: Array<Node | string>): HTMLElement;
+export function remove(node: Node): void;
+export function unwrap(node: Node): void;
+export function wrap(node: Node, wrapper: HTMLElement): HTMLElement;
+export function insertAfter(newNode: Node, refNode: Node): void;
+export function nodeValue(node: Node): string;
+export function isEmpty(node: Node): boolean;
+export function outerHtml(el: Element): string;
+export function placeCaret(el: HTMLElement): void;
+export function isInsideEditable(node: Node): boolean;
+export function on(target: EventTarget, type: string, handler: EventListener, options?: AddEventListenerOptions): () => void;
+export function trapFocus(container: HTMLElement, onEscape: () => void): () => void;
+export function makeDraggable(handle: HTMLElement, box: HTMLElement): () => void;

package/types/core/env.d.ts

@@ -0,0 +1,10 @@
+export const env: {
+  isChrome: boolean;
+  isFF: boolean;
+  isSafari: boolean;
+  isEdge: boolean;
+  isMac: boolean;
+  isMobile: boolean;
+  isTouch: boolean;
+  modifierKey: string;
+};

package/types/core/func.d.ts

@@ -0,0 +1,11 @@
+export function clamp(val: number, min: number, max: number): number;
+export function debounce<T extends (...args: any[]) => any>(fn: T, delay: number): (...args: Parameters<T>) => void;
+export function throttle<T extends (...args: any[]) => any>(fn: T, limit: number): (...args: Parameters<T>) => void;
+export function compose(...fns: Function[]): Function;
+export function identity<T>(x: T): T;
+export function isNil(val: unknown): val is null | undefined;
+export function isString(val: unknown): val is string;
+export function isFunction(val: unknown): val is Function;
+export function mergeDeep<T extends object, U extends object>(target: T, source: U): T & U;
+export function isPlainObject(val: unknown): val is Record<string, unknown>;
+export function rect2bnd(rect: DOMRect | null | undefined): Pick<DOMRect, 'top' | 'left' | 'width' | 'height' | 'bottom' | 'right'> | null;

package/types/core/key.d.ts

@@ -0,0 +1,3 @@
+export const key: Readonly<Record<'BACKSPACE' | 'TAB' | 'ENTER' | 'ESCAPE' | 'SPACE' | 'PAGE_UP' | 'PAGE_DOWN' | 'END' | 'HOME' | 'LEFT' | 'UP' | 'RIGHT' | 'DOWN' | 'DELETE' | 'NUM0' | 'NUM1' | 'NUM2' | 'NUM3' | 'NUM4' | 'NUM5' | 'NUM6' | 'NUM7' | 'NUM8' | 'B' | 'E' | 'I' | 'J' | 'K' | 'L' | 'R' | 'S' | 'U' | 'V' | 'Y' | 'Z' | 'SLASH' | 'PERIOD', string>>;
+export function isKey(event: KeyboardEvent, keyName: string): boolean;
+export function isModifier(event: KeyboardEvent, keyName: string): boolean;

package/types/core/lists.d.ts

@@ -0,0 +1,10 @@
+export function last<T>(arr: T[]): T | undefined;
+export function first<T>(arr: T[]): T | undefined;
+export function initial<T>(arr: T[], n?: number): T[];
+export function tail<T>(arr: T[], n?: number): T[];
+export function flatten<T>(arr: T[][]): T[];
+export function unique<T>(arr: T[]): T[];
+export function chunk<T>(arr: T[], n: number): T[][];
+export function groupBy<T>(arr: T[], keyFn: (item: T) => string): Record<string, T[]>;
+export function all<T>(arr: T[], predicate: (item: T) => boolean): boolean;
+export function any<T>(arr: T[], predicate: (item: T) => boolean): boolean;

package/types/core/range.d.ts

@@ -0,0 +1,22 @@
+export class WrappedRange {
+  constructor(sc: Node, so: number, ec: Node, eo: number);
+  sc: Node;
+  so: number;
+  ec: Node;
+  eo: number;
+  isCollapsed(): boolean;
+  toNativeRange(): Range;
+  select(): void;
+  commonAncestor(): Element | null;
+  blockNode(editable: HTMLElement): Element | null;
+  toString(): string;
+  getClientRects(): DOMRect | null;
+  insertNode(node: Node): void;
+}
+export function fromNativeRange(range: Range): WrappedRange;
+export function currentRange(editable?: HTMLElement): WrappedRange | null;
+export function rangeFromElement(el: HTMLElement): WrappedRange;
+export function collapsedRange(node: Node, offset?: number): WrappedRange;
+export function isSelectionInside(el: HTMLElement): boolean;
+export function withSavedRange(fn: () => void): void;
+export function splitText(textNode: Text, offset: number): [Text, Text];

package/types/core/sanitise.d.ts

@@ -0,0 +1,9 @@
+export interface SanitiseHTMLOptions {
+  allowIframes?: boolean;
+}
+export interface SanitiseURLOptions {
+  allowData?: boolean;
+  media?: boolean;
+}
+export function sanitiseHTML(html: string, options?: SanitiseHTMLOptions): string;
+export function sanitiseUrl(url: string | null | undefined, options?: SanitiseURLOptions): string | null;

package/types/index.d.ts

@@ -1,12 +1,21 @@
 /**
  * AutumnNote – TypeScript declarations
- * @version 1.13.0
+ * @version 1.15.0
  */
 
 // ---------------------------------------------------------------------------
 // Options
 // ---------------------------------------------------------------------------
 
+export interface PasteErrorData {
+  /** Human-readable description of the rejected paste or drop. */
+  message: string;
+  /** Payload size in bytes, when the failure is caused by a configured limit. */
+  size?: number;
+  /** Maximum permitted payload size in bytes, when applicable. */
+  maxBytes?: number;
+}
+
 export interface AsnOptions {
   /** Placeholder text when the editor is empty. */
   placeholder?: string;
@@ -102,6 +111,8 @@ export interface AsnOptions {
   tableHeaderRow?: boolean;
   /** Callback fired after every paste event. */
   onPaste?: (data: { text: string; html: string | null }) => void;
+  /** Callback fired when pasted or dropped content cannot be processed. */
+  onPasteError?: (error: PasteErrorData) => void;
   /** Additional color swatches shown at the top of the color picker. */
   colorSwatches?: string[];
   /** Custom focus ring colour — overrides the default blue. Accepts any valid CSS colour string, e.g. '#f97316'. */
@@ -337,13 +348,13 @@ export declare const locales: Record<string, AsnLocale>;
 export declare function resolveLocale(lang: string | Partial<AsnLocale> | null | undefined): AsnLocale;
 
 // Re-export core utility modules exposed by the package entry-point.
-export * from '../src/js/core/dom.js';
-export * from '../src/js/core/range.js';
-export * from '../src/js/core/func.js';
-export * from '../src/js/core/key.js';
-export * from '../src/js/core/lists.js';
-export * from '../src/js/core/env.js';
-export * from '../src/js/core/sanitise.js';
+export * from './core/dom.js';
+export * from './core/range.js';
+export * from './core/func.js';
+export * from './core/key.js';
+export * from './core/lists.js';
+export * from './core/env.js';
+export * from './core/sanitise.js';
 
 // ---------------------------------------------------------------------------
 // Context — per-instance editor hub

package/dist/_headers

@@ -1,5 +0,0 @@
-/*.html
-  Cache-Control: public, max-age=0, must-revalidate
-
-/assets/*
-  Cache-Control: public, max-age=31536000, immutable

package/dist/robots.txt

@@ -1,4 +0,0 @@
-User-agent: *
-Allow: /
-
-Sitemap: https://autumn.konexforge.com/sitemap.xml

package/dist/sitemap.xml

@@ -1,58 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
-        xmlns:xhtml="http://www.w3.org/1999/xhtml">
-  <url>
-    <loc>https://autumn.konexforge.com/</loc>
-    <lastmod>2026-07-12</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>1.0</priority>
-    <xhtml:link rel="alternate" hreflang="en" href="https://autumn.konexforge.com/" />
-    <xhtml:link rel="alternate" hreflang="vi" href="https://autumn.konexforge.com/vi/" />
-    <xhtml:link rel="alternate" hreflang="x-default" href="https://autumn.konexforge.com/" />
-  </url>
-  <url>
-    <loc>https://autumn.konexforge.com/docs.html</loc>
-    <lastmod>2026-07-12</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>0.9</priority>
-    <xhtml:link rel="alternate" hreflang="en" href="https://autumn.konexforge.com/docs.html" />
-    <xhtml:link rel="alternate" hreflang="vi" href="https://autumn.konexforge.com/vi/docs.html" />
-    <xhtml:link rel="alternate" hreflang="x-default" href="https://autumn.konexforge.com/docs.html" />
-  </url>
-  <url>
-    <loc>https://autumn.konexforge.com/playground.html</loc>
-    <lastmod>2026-07-12</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>0.7</priority>
-    <xhtml:link rel="alternate" hreflang="en" href="https://autumn.konexforge.com/playground.html" />
-    <xhtml:link rel="alternate" hreflang="vi" href="https://autumn.konexforge.com/vi/playground.html" />
-    <xhtml:link rel="alternate" hreflang="x-default" href="https://autumn.konexforge.com/playground.html" />
-  </url>
-  <url>
-    <loc>https://autumn.konexforge.com/vi/</loc>
-    <lastmod>2026-07-12</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>0.9</priority>
-    <xhtml:link rel="alternate" hreflang="en" href="https://autumn.konexforge.com/" />
-    <xhtml:link rel="alternate" hreflang="vi" href="https://autumn.konexforge.com/vi/" />
-    <xhtml:link rel="alternate" hreflang="x-default" href="https://autumn.konexforge.com/" />
-  </url>
-  <url>
-    <loc>https://autumn.konexforge.com/vi/docs.html</loc>
-    <lastmod>2026-07-12</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>0.8</priority>
-    <xhtml:link rel="alternate" hreflang="en" href="https://autumn.konexforge.com/docs.html" />
-    <xhtml:link rel="alternate" hreflang="vi" href="https://autumn.konexforge.com/vi/docs.html" />
-    <xhtml:link rel="alternate" hreflang="x-default" href="https://autumn.konexforge.com/docs.html" />
-  </url>
-  <url>
-    <loc>https://autumn.konexforge.com/vi/playground.html</loc>
-    <lastmod>2026-07-12</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>0.6</priority>
-    <xhtml:link rel="alternate" hreflang="en" href="https://autumn.konexforge.com/playground.html" />
-    <xhtml:link rel="alternate" hreflang="vi" href="https://autumn.konexforge.com/vi/playground.html" />
-    <xhtml:link rel="alternate" hreflang="x-default" href="https://autumn.konexforge.com/playground.html" />
-  </url>
-</urlset>